Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/g712yDsWN-r5s7JllaLGUhPrjGI.roa
File: g712yDsWN-r5s7JllaLGUhPrjGI.roa (raw, json)
Hash identifier: CrP+gWrJMpC44I2BR3s9wfSQnZeYIUcjWyQv+c0m8U8=
Subject key identifier: 83:BD:76:C8:3B:16:37:EA:F9:B3:B2:65:95:A2:C6:52:13:EB:8C:62
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BD50BCCE9ECD4FA47B7F174DE0F69
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/g712yDsWN-r5s7JllaLGUhPrjGI.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30793
IP address blocks: 85.31.252.0/24 maxlen: 24
87.239.216.0/21 maxlen: 21
87.239.216.0/22 maxlen: 22
93.180.160.0/19 maxlen: 19
185.58.160.0/22 maxlen: 22
185.58.160.0/23 maxlen: 23
185.58.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d5:0b:cc:e9:ec:d4:fa:47:b7:f1:74:de:0f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83bd76c83b1637eaf9b3b26595a2c65213eb8c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:49:2e:1f:db:33:a2:9c:b5:78:c3:0b:c6:
c0:45:46:cf:10:01:f9:80:21:c1:4a:71:2e:fd:37:
24:89:21:b1:06:56:fa:65:f1:31:5b:57:c6:14:be:
10:82:90:80:37:4e:80:9b:8f:ab:ce:be:5a:ea:71:
c5:f4:37:54:e8:01:09:b3:e3:2f:30:a8:c1:8e:58:
7c:cc:3c:6f:b2:00:eb:73:e1:5f:7a:6c:37:6a:a7:
d4:52:72:e4:88:b7:d3:d4:d5:64:11:cb:bc:2d:f5:
9c:b6:9e:dd:5d:c5:27:85:4e:fc:c7:1e:d1:2e:28:
69:b8:e5:e5:3e:25:ff:81:ee:1e:3f:e4:5a:29:ba:
bf:cb:4c:76:46:d9:c2:75:ac:84:b0:74:17:82:88:
bb:68:2a:c5:3e:bc:01:5a:f9:ae:d9:38:09:90:95:
f1:ad:4d:01:d4:f2:ae:6e:7a:86:14:e1:14:05:1c:
bd:d0:f8:59:8a:f6:e7:e0:f8:6c:df:ff:15:9a:7c:
a5:84:9d:84:8a:68:8e:5c:6a:d8:07:2c:3f:8c:a8:
ee:6f:0d:ea:97:91:06:2b:86:4d:9f:85:30:50:e6:
de:eb:3c:d1:19:b5:2d:94:ae:d5:e4:85:df:cd:4e:
fc:2f:53:a2:da:7a:42:d1:7c:9b:a5:9e:3f:83:a1:
a2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BD:76:C8:3B:16:37:EA:F9:B3:B2:65:95:A2:C6:52:13:EB:8C:62
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/g712yDsWN-r5s7JllaLGUhPrjGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.252.0/24
87.239.216.0/21
93.180.160.0/19
185.58.160.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:19:2b:7b:95:2f:6c:4b:a7:cc:43:20:3b:a4:99:c8:5b:3b:
14:2e:0b:f2:01:19:e3:6b:35:9e:23:1c:ec:bd:7c:75:97:77:
73:81:53:e2:5a:43:a5:4a:2f:31:4a:f3:62:10:f9:e1:d5:aa:
d9:f3:98:54:c5:5a:cf:fb:ce:e5:c6:e4:d4:e4:20:88:a1:8d:
09:85:90:37:38:64:42:75:ae:4f:dd:50:e1:b6:92:86:25:40:
0f:b0:96:6b:78:84:bf:f9:44:c7:a0:07:6c:6e:d0:c6:53:bd:
24:34:0b:e3:b4:b2:51:d7:77:e9:91:80:83:4f:11:e6:e4:71:
a0:be:11:db:09:55:16:1e:ff:40:b0:18:19:2b:49:96:d1:13:
d3:8d:91:f5:a2:ba:c8:1a:22:ff:ec:9f:23:92:ea:a9:76:d2:
8b:6a:c3:b1:74:d9:ea:2c:6c:ba:4e:28:4a:2b:07:3a:46:a6:
4b:6f:4b:7d:f4:9f:8c:4f:29:e7:87:65:66:2b:ed:1b:bf:0f:
d4:36:b0:e9:89:4a:b8:e0:9f:5c:a7:ac:e5:b7:7f:58:c7:96:
3e:71:a2:d8:be:77:96:f1:0e:ac:51:ba:fa:ce:c3:b4:da:55:
e7:22:fa:27:8d:55:6b:c0:a0:95:e3:9e:86:81:c2:b7:c2:84:
ee:ba:03:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:41 2025 by rpki-client